Security center
See your business the way an attacker does.
10-second check
How secure is your website?
Enter your site and get an instant, free security score. No login, nothing intrusive.
We only read public information: no port scanning, no exploitation.
What the grade means
From grade F to grade A.
Missing headers, old encryption and files left public are the usual reasons a site scores badly. Each one has a fix. Run the scan above to see where yours stands.
Who we secure
Tested around what your sector has to protect
The risk sits in different places for a school, a clinic or a lender. Your exact scope is agreed in writing before any testing starts, whichever sector you are in.
Schools, colleges and training providers
Learner records, fee payments and parent portals, often holding data about minors.
What we test: Student and parent portals, enrolment and fee forms, staff email and admin accounts.
Security for this sectorClinics and healthcare
Patient records, some of the most sensitive data the Cyber and Data Protection Act covers.
What we test: Patient portals and booking systems, what each staff role can see, remote access.
Security for this sectorLaw firms
Client files and privileged email, exactly what an attacker or a rival would want.
What we test: Email and document portals, staff accounts, file sharing and access settings.
Security for this sectorTravel agencies and tour operators
Bookings that carry passport details, and card or mobile money payments.
What we test: Booking engines and payment pages, customer accounts, admin panels.
Security for this sectorFinance, microfinance and fintech
Loan, payment and mobile money flows that move real money.
What we test: Customer portals and the APIs behind them, transaction and approval logic, one customer reaching another's data.
NGOs and development organisations
Beneficiary and donor records, often spread across partner systems.
What we test: Data collection and reporting systems, staff email, shared drives and partner access.
Not on the list? The same method applies to any business with a website, an app or customer data. Tell us what you run.
When you need a person on it
Founder-led security work.
Penetration Testing
We attack your systems the way a real attacker would, then hand you a report you can act on.
Learn moreData Protection Readiness
Get ready for Zimbabwe's Data Protection Act 2021, with a plain checklist rather than legalese.
Learn moreSecurity Monitoring
Ongoing watch on the things that change: certificates, exposure, and new weaknesses.
Learn moreThe full 5 page security report
A deeper passive assessment with a branded PDF: SSL, headers, email spoofing and DPA signals.
The toolkit
22 free tools. No login, nothing intrusive.
Every one is passive and read-only. Run them on your own domain in seconds.
Scan & assess
Email & domain
Attack surface
Passwords & exposure
Awareness & business
Research and transparency
We publish what we find, and how we are held to account.
The Trust Centre
Live status, scans you can run on our own site, and how we handle your data. All in one place.